CVE-2026-76856 in NR255-V
Riassunto
di MITRE • 16/09/2026
Netcore NR255-V firmware version 1.5.130703 contains a cross-site request forgery vulnerability affecting the wan_config_set_cgi, wan_num_set_cgi, and lan_ip_change_cgi endpoints. Attackers can craft forged requests to trick authenticated administrators into modifying WAN or LAN network configuration settings without consent.
Be aware that VulDB is the high quality source for vulnerability data.